Live updates: Shai-hulud, the most dangerous NPM breach in history

Comments (3)

btown · 2h ago

Larger discussion thread here: https://news.ycombinator.com/item?id=45260741

293984j29384 · 1h ago

I scanned this discussion looking for a way to tell if you've been compromised but nothing jumped out.

bikeshaving · 1h ago

If you’re a package maintainer, please defensively revoke all NPM and GitHub tokens. This is a worm which is still spreading and you probably don’t want to publish anything today anyways, so you might as well use this incident as an opportunity to rotate everything.

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (stepsecurity.io)

How to make the Framework Desktop run even quieter (noctua.at)

Things you can do with a Software Defined Radio (2024) (blinry.org)

Denmark close to wiping out cancer-causing HPV strains after vaccine roll-out (gavi.org)

Waymo has received our pilot permit allowing for commercial operations at SFO (waymo.com)

Meta RayBan AR Glasses Shows Lumus Waveguide Structures in Leaked Video (kguttag.com)

How Container Filesystem Works: Building a Docker-Like Container from Scratch (labs.iximiuz.com)

I built my own phone because innovation is sad rn [video] (youtube.com)

Should We Drain the Everglades? (rabbitcavern.substack.com)

Wind turbine blade transportation challenges (spectrum.ieee.org)

Plugin System (iina.io)

Scammed out of $130K via fake Google call, spoofed Google email and auth sync (bewildered.substack.com)

Bertrand Russell to Oswald Mosley (1962) (lettersofnote.com)

A new experimental Google app for Windows (blog.google)

CIA Freedom of Information Act Electronic Reading Room (cia.gov)

Launch HN: Rowboat (YC S24) – Open-source IDE for multi-agent systems (github.com)

UTF-8 history (2003) (doc.cat-v.org)

Top UN legal investigators conclude Israel is guilty of genocide in Gaza (middleeasteye.net)

The Linux Process Journey (2023) [pdf] (thelearningjourneyebooks.com)

A Dumb Introduction to z3 using Rust (asibahi.github.io)

Writing an operating system kernel from scratch – RISC-V/OpenSBI/Zig (popovicu.com)

Paper Folding Assembly Line [video] (youtube.com)

When the job search becomes impossible (jeffwofford.com)

Adios Chicos, 25 Years of KDE (jriddell.org)

Development of the MOS Technology 6502: A Historical Perspective (2022) (embeddedrelated.com)

Implicit ODE solvers are not universally more robust than explicit ODE solvers (stochasticlifestyle.com)

In Defense of C++ (dayvster.com)

60 years after Gemini, newly processed images reveal details (arstechnica.com)

Generative AI as Seniority-Biased Technological Change (papers.ssrn.com)

Microsoft Favors Anthropic over OpenAI for Visual Studio Code (theverge.com)

Java 25 officially released (mail.openjdk.org)

Teen safety, freedom, and privacy (openai.com)

Show HN: AI Code Detector – detect AI-generated code with 95% accuracy (code-detector.ai)

Scientists uncover extreme life inside the Arctic ice (news.stanford.edu)

Migrating to React Native's new architecture (shopify.engineering)

Will I run Boston 2026? (getfast.ai)

"Your" vs. "My" in user interfaces (adamsilver.io)

Learn x86-64 assembly by writing a GUI from scratch (2023) (gaultier.github.io)

Robert Redford has died (nytimes.com)

Hosting a website on a disposable vape (bogdanthegeek.github.io)

Europe is locking itself in to US LNG (davekeating.substack.com)

Alex Karp Insists Palantir Doesn't Spy on Americans. Here's What He's Not Saying (theintercept.com)

AMD Begins Plumbing APCI C4 Support in the Linux Kernel for Power Savings (phoronix.com)

A few corrections about the transition from Blue Systems to Techpaladin (pointieststick.com)

Gearbox CEO Randy Pitchford tells Borderlands 4 critics: "code your own engine" (techspot.com)

Adding FRM parser utility to MariaDB (hp77-creator.github.io)

Trucker built a scale model of NYC over 21 years (gothamist.com)

Launch HN: Trigger.dev (YC W23) – Open-source platform to build reliable AI apps

When will Jaguar Land Rover restart production? "No one knows." (arstechnica.com)

Google Secretly Handed ICE Data About Pro-Palestine Student Activist (theintercept.com)

Live updates: Shai-hulud, the most dangerous NPM breach in history

Comments (3)